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Method and devices fo r^ printing a fr ankino jiark on a^-docu- 
mental 

The present invention is related to a method for 
5 printing a franking mark on a document, comprising the 
following steps: 

a. making available a unique bit string ; 

b. establishing an identification code; 

c. securely printing said franking mark on the document, 
10 said franking mark at least comprising information 

relating to the bit string and the identification 
code . 

w Franking mark" here refers, for example, to an 
electronic postage stamp, that is to say a mark printed on 
15 a postal article by a franking machine or a printer, which 
inter alia can represent a franking value for said postal 
article. In the context of the present invention, however, 
"franking mark" has a wide meaning. The concept "franking 
mark" can refer to all kinds of marks which can be placed 
20 on arbitrary documents for securing said documents. Besides 
postal articles, such documents can also be value 
documents, such as admission tickets, payment slips, etc., 
which are protected by such a mark. 

A method of the kind mentioned in the beginning is 
25 disclosed in the following two documents made public by the 
Engineering Center for United States Postal Service {USPS ) : 
"Information Based Indicia Program (IBIP), Open System 
Indicium Specification" and "Information Based Indicia 
Program (IBIP), Open System Postal Security Device (PSD) 
30 Specification", both dated 23 July 1997 (draft documents) . 

With such a method, electronic postage stamps can be 
obtained and printed on postal articles. The device, for 
example a computer, with which the electronic postage stamp 
is printed is/thereto provided with a Postal Security 
35 Device (PSDVV to which a unique identification code is 
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related. The electronic postage stamp comprises various 
elements, of. which a few a^e mentioned as "security 
critical": the identification code of the PSD, the value of 
the contents of an incremental register, the franking value 
5 of the postal article/and a digital signature. The contents 
of the incremental Register represent the total monetary 
value of all hitherto printed electronic postage stamps 
with the related/PSD. The combination of identification 
code and the contents of the incremental register 

10 represents a unique bit string per postal article. Since 

the manner in which said unique bit string is composed must 
comply with a known rule, the value of a following unique 
bit stririg for a following electronic postage stamp can be 
predicted, which is disadvantageous in regard to possible 

15 fraud* 

In an article by J. Quittner in FOX Market Wire of 9 
April 1998, "Neither bugs, nor hackers, nor Pitney Bows 
will keep E-stamp from delivering your postage", available 
on the Internet on 5 May 1998, such a system, which meets 

20 these specifications and originates from the firm of E- 

Stamp, is described. The system of E-Stamp also makes use 
of a personal computer for printing a franking mark on a 
postal article directly with the aid of a regular printer 
connected to said personal computer. The personal computer 

25 is connected, via the Internet, with the United States 
Postal Service. Via the Internet, "electronic postage 
stamps" can thus be bought at the United States Postal 
Service. The franking value of the electronic postage stamp 
is debited directly from the savings balance of the related 

30 client and stored and protected in the PSD. The PSD is a 
small box which can be inserted at the rear of a regular 
laserprinter . As soon as a user has issued a command to 
print an electronic postage stamp on a postal article, an 
electronic postage stamp is downloaded and the printer 

35 prints a two-dimensional bar code, after which the value of 
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counter then determines the maximum number of times that 
the unique bit string may be used for printing the franking 
mark on documents. Alternatively, the counter represents a 
balance for electronic postage stamps which may be debited 
5 to the value of zero. In that case, after the reading of 

the information carrier, it is checked whether the value of 
the counter on the information carrier lies within certain 
predefined limits. If that is the case, the value of the 
counter is adjusted after reading. If not, printing of the 

10 franking mark is blocked. 

In a second embodiment of the method according to the 
invention, use is made, when executing step c, of a 
printing device connected to a (personal) computer. In this 
PC embodiment, use is preferably made of a bank card 

15 (smartcard) , which, via suitable input/output means, 
communicates with the PC and in fact takes over the 
function of a PSD, which therefore has become redundant. 

In this second embodiment of course, a counter, which 
is added to a unique bit string and determines the maximum 

20 number of times that the unique bit string for printing the 
franking mark on documents may be used, or which represents 
a monetary value that may be expended for electronic 
postage stamps, can also be used. 

The identification code can comprise a user 

25 identification code and/or a printer identification code. 
The user identification code, for example, can contain at 
least the number of the bank/ATM card of the user. The 
printer identification code is preferably coupled to a SAM 
which is used to print the franking mark, protected by a 

30 MAC (= message authentication code, or a digital signature) 
or via encoding, on the document. Said SAM can be located 
in a separate franking machine, but also in a (personal) 
computer especially arranged for this purpose. 

The franking mark will preferably be printed with a 

35 second message authentication code. A secret relationship 
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exists between said second message authentication code and 
the franking .mark, which will be known only to the 
appropriate authorities, whereby it will be impossible to 
change data from the franking mark unnoticed. 
5 Alternatively, the data can also be stored in encoded form. 
For implementing the method according to the 
invention, the set of unique bit strings is stored in a 
first central memory, used combinations of identification 
codes and unique bit strings are stored in a second central 

10 memory, franking marks printed on documents are read in, 

combinations of identification codes and unique bit strings 
present in the read-in franking marks are stored in a third 
central memory, and these are compared to the combinations 
stored in the second central memory. In this way it can be 

15 checked precisely how each unique bit string is used, and 
any fraudulent users can be traced. It can be checked, for 
example, whether each unique bit string is used only once 
and whether someone has not copied a franking mark. 
For implementing the method according to the 

20 invention, the invention is also related to a system for 
printing a franking mark on a document, comprising: 

a. means for making available a unique bit string; 

b. means for establishing an identification code; 

c. means for securely printing the franking mark on the 
25 document, said franking mark at least comprising 

information relating to the bit string and the 
identification coder- 
characterised in that the means for making available the 
unique bit string comprise a first centrally arranged 
30 memory with a set of unique bit strings, from which the 

unique bit string is selected, and that means are provided 
for centrally registering which unique bit strings are made 
available for use. 

Advantageous embodiments /f such a system are apparent 
35 from the sub-conclusions 11 >Sp Jfq)and including to 20. 
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The present invention is also/related to an exchange 
provided with a first central meinory having a set of unique 
bit strings, a second central memory for storing the 
combinations of identif icatiOEf codes and provided unique 
5 bit strings, said combinatio/s corresponding with franking 
marks which have been printysd on a document, central input 
means for inputting f ranking marks printed on documents, a 
third central memory for Storing combinations of 
identification codes andr unique bit strings present on the 
10 inputted franking marks', and processor means connected to 
the central input means and the first, second, third 
central memories f or /nutually comparing the data in the 
second and third cenftral memories. 

The invention is further related to means for a device 
15 which is arranged for printing a franking mark on a 

document, said means being at least arranged for receiving 
data from an information carrier, said data at least 
comprising a unique bit string originating from a set of 
unique bit strings for compiling and making data available 
20 for the franking mark for the document in protected form, 
so that the device can print the franking mark on the 
document securely, said franking mark comprising at least 
the said data as well as an identification code. Said means 
can have the form of a separate burglar-proof module. 
25 Alternatively, however, they can also comprise several 

elements which must be implemented in the related device. 

Such means are preferably arranged to check, after 
reception of the data from the information carrier, whether 
the value of a counter on the information carrier lies 
30 within predefined limits, and, if this is the case, to 

instruct the information carrier to adjust the value of the 
counter, and, if this is not the case, to block the 
printing of the franking mark. 

The invention is also related to an information 
35 carrier provided with a memory in which at least the 
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following data is included: either a unique bit string 
selected from a set of unique bit strings, an 
identification code, and a message authentication code 
which is calculated on the basis of at least the unique bit 
5 string and the identification code, or the unique bit 
string and the identification code in encoded form. 

Finally, the invention relates to a computer-readable 
information carrier, which is provided with software, as 
well as a data carrier wave which, after being read in, 
10 enables the computer to execute a method for printing a 
franking mark on a document, comprising the following 
steps : 

a. the reception of a unique bit string; 

b. establishing an identification coder- 
is c. securely printing the franking mark on the document, 

said franking mark at least comprising information 
relating to the bit string and the identification 
code; 

where the bit string is received from a centrally stored 

20 set of unique bit strings. 

The present invention will be explained below with 
reference to some drawings intended only as an illustration 
of the invention and not as a limitation thereof. In 
particular, the invention has broader application than 

25 postal traffic only. 

Fig. 1 shows an embodiment of a system according to 
the invention, in which use is made of an information 
carrier in which one or more electronic postage stamps can 
be stored; 

30 Fig. 2a shows the steps of a method for providing an 

electronic postage stamp; 

Fig. 2b shows the steps of a method for providing the 
electronic postage stamp in which use is made of a counter; 
Fig. 3a shows the steps for printing an electronic 
35 postage stamp; 
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Fig. 3b shows the steps for printing an electronic 
stamp, in which use is made of a counter; 

Figs. 4a and 4b show the steps of a method according 
to the invention in which use is made of a personal 

computer; _ _ 

Fig- b shows a system according to the invention, in 
which use is made of a personal computer. 

In Fig. 1, reference numbe^2 refers to a terminal, 
which, for example, is set un/in the wall of a post office. 
Said terminal 2 can communicate with an exchange 34, for 
example via the public snatched telephone network (PSTN) 
46. Communication patl^fi via other networks are of course 
possible. In this c^se, use can be made of the Internet. 
Communication can' also take place in other ways, for 
example via CDfTOMs, floppy disks, etc. 

The terminal 2 shown in Fig. 1 comprises a processor 
4, which is coupled to display means 8 for communicating 
with a user. Said terminal 2 also comprises a memory 6, 
which is connected to said processor 4. Reference number 10 
refers diagrammatically to a keyboard, with which a user 
can input data and instructions for said processor 4. To 
this end, said keyboard 10 is connected to said processor 
4. Said processor 4 is further connected to a Secure 
Access/Application Module 3 (usually called "SAM"). 
The SAM 3 is shown in Fig. 1 within terminal 2. If so 
wished, SAM 3 may also be present outside terminal 2. If 
desired, SAM 3 may even be mounted near or in exchange 34. 

In the embodiment shown in Fig. 1, said terminal 2 is 
provided with two input/output units 12, 14. In said 
input/output unit 12, a bank card or ATM card can be 
inserted. Said input /output unit 12 is thereto provided 
with one or more suitable connectors (not shown) which can 
be brought into contact with the bank card and/or ATM card 
16, as persons skilled in the art will know. With such a 
bank card and/or ATM card, the user can identify himself 
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and effect a PIN payment. In the event that said bank/ATM 
card contains an electronic purse, the user can herewith 
also effect payment actions, for example the payment of an 
electronic postage stamp which is to be printed on .a postal 
5 article. 

Said input/output unit 14 is arranged for accepting an 
information carrier 18, which can be a chip card. To this 
end, said input/output means 14 are provided with one or 
more suitable connectors which can come into contact with 

10 the processor (not shown) on said chip card 18, as persons 
skilled in the art will know. On such an information 
carrier 18, one or more electronic postage stamps, in an 
embodiment of the invention, are stored. Such postage 
stamps are then preferably stored under protection of a 

15 message authentication code (MAC) and/or protection by 
encoding . 

In an embodiment, the ATM card/bank card is a multi- 
functional chip card, which inter alia can be used for 
payment purposes but also offers possibilities for other 

20 applications. An example of such a chip card is the 

Chipper® of the Netherlands KPN Telecom and Postbank. In 
that case, said cards 16 and 18 can be the same card and 
said input/output means 12 can be omitted. 

Alternatively, said information carrier 18 can also be 

25 a card with, for example, a magnetic strip which itself is 
not provided with processor means. Data can then be written 
to, read from and deleted from the magnetic strip by said 
terminal 2. In that case, electronic postage stamps can be 
stored under protection by encoding. It is imaginable that 

30 said terminal 2 has a supply of such magnetic strip cards 
and that a customer buys one or more of such cards. On the 
magnetic strip, one or more of such electronic postage 
stamps can then be stored. Such magnetic strip cards can be 
disposable cards. Optionally, chip cards can also be used 

35 as disposable cards. 
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In Fig. 1, the reference number 20 refers to a 
franking machine. Said franking machine 20 is provided with 
input /output means 21 for accepting said information 
carrier 18. Said franking machine 20 is also provided with 
5 a processor 23 , which, besides being connected to said 

input /output means 21, is also connected to weighing means 
25, a printer 27 and a SAM 19. 

Via said input/output means 21, said processor 23 can 
communicate with said information carrier 18. 
10 With the aid of said weighing means 25, the franking 

machine 20 can determine the weight of a postal article 22. 

With the aid of said printer 27, the franking machine 
20 can subsequently print information 29 on said postal 
article 22. 

IS* ^ Said information 2 9 comprises, top example, human- 
readable data 24 related to the mail^sending organisation 
(or other advertising), as well as/a marking sign 26 (for 
example a bar code) enabling automatic orientation of the 
postal article in a stamping/soyriing machine, and a 
20 franking mark 28, for example ifn the form of a two- 
dimensional bar code 28, which contains further, possibly 
encoded, information. Said franking mark 28 shall at least 
contain a unique bit string, of which the use will be 
explained further on, ana an identification code. The 
25 identification code identifies the user, i.e. the person 
who purchased the el^tronic postage stamp, and/or the 
device with which the franking mark is printed. If the 
identification code is coupled to the printing device, this 
can, for example/ be a unique code associated with said SAM 
30 19. In that ca/e, the owner of the franking machine is 

responsible for possible fraude with the use of electronic 
postage stands. 

As identification code for the user, the number of 
said bank card 16 can be used. The bank card number is 
35 after all a unique number which is coupled to the user, 
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while a reasonable degree of certainty can be provided that 
the user is the owner of said bank card 16 by having him 
identify himself via a PIN code. 

Further, said franking mark 28 can comprise 
5 information related to the terminal 2 and the franking 
machine 20, as well as the type of postal delivery 
(regular, express delivery, registered, per air mail, 
etc, ) . 

The franking value can also be printed on the postal 
10 article 22 in human-readable form 31. 

On said postal article 22, space is allocated for the 
address 30 of the addressee. 

The system shown in Fig. 1 contains a device 32 to 
read in said postal articles 22 during dispatch from the 
15 sender to the addressee. If the unique bit string directly 
represents a franking value, the franking value, for 
example, can be checked. The data read in by said device 32 
can be supplied to the exchange 34. The information which 
is read in by said device 32 can be supplied to said 
20 exchange 34 in any prior art manner. 

For inputting the information to a processor 36 
present in said exchange 34, said exchange 34 is provided 
with suitable input means 44 which are connected to said 
processor 36. 

25 For implementing the method according to the 

invention, said exchange 34 is preferably provided with 
three memories 38, 40, 42. Of course these are not required 
to be physically separate memories. They can refer to 
different fields within one larger memory. 

30 Fig. 2a shows a possible embodiment of the functioning 

of the terminal 2 during operation. 

A customer arrives at said terminal 2 and inserts his 
bank card 16 (this shall hereinafter be used to refer to 
both a bank/ATM card or any (multi-functional) chip card) 

35 in the corresponding input/output means 12. The processor 4 
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requests, via the monitor 8, which type of electronic 
postage stamps the customer wants to have. The customer 
can, for example, indicate that he wishes to purchase a 
franking card 18 (this term shall be used hereinafter for 
5 every possible type of information carrier 18) with 100 

electronic postage stamps of 80 cents. This takes place in 
step 202. 

Said processor 4 reads the number of the bank card 16 
and asks the user to identify himself with his PIN code, 
10 steps 204 and 206. 

In step 208, said processor 4 checks, in a manner 
known per se, whether the customer has identified himself 
correctly. If not, an error message follows in step 210. 
After the error message in step 210, said processor 4 can 
15 return to the beginning of the flowchart drawn in Fig. 2a. 
Alternatively, a user can, as known per se, be given three 
opportunities to enter the correct PIN code. 

If a user has identified himself in the correct 
manner, the program in said processor 4 jumps to step 212 
20 and reads a franking number. In accordance with the 

invention, the franking number consists of a bit string 
which is unique and is selected from a set of unique bit 
strings . 

The set of unique bit strings is stored in said memory 
25 38 in said exchange 34. Said exchange 34 is connected with 
several terminals 2 distributed across the country and can, 
for example via the PSTN 4 6, make one or more unique 
franking numbers available from the set of unique franking 
numbers for said terminals 2. In that event, a certain 
30 amount of desired unique franking numbers can be 

transferred per transaction from the memory 38 in the 
exchange 34 to the memory 6 in the terminal 2. 
Alternatively, however, each of the terminals 2 can have 
stored a certain supply of unique franking numbers in said 
35 memory 6 beforehand, so that it is not required to 
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establish a connection between the terminal 2 and the 
exchange 34 each time a transaction with a customer takes 
place. Transmission of the unique bit strings can be 
protected in any prior art manner. 
5 The set of unique franking numbers in the memory 38 of 

the exchange 34 consists, for example, of bit strings of 
128 bits. This set thus contains such a large number of 
unique franking numbers that the need for such numbers will 
be covered for years. 

10 Preferably prior to step 212, the customer pays the 

franking card 18 in an electronic manner. This is done with 
the aid of the bank card 16 in a manner known per se. That 
is to say that, if said bank card 16 is a regular bank 
card, payment takes place by debiting the customer's bank 

15 balance. The manner in which this is done is known to those 
skilled in the art and does not require further explanation 
here. In the case that said bank card 16 comprises an 
electronic purse, the amount owed can be debited directly 
from the balance of said bank card 16. Payment can also 

20 take place in cash. 

The processor 4 then provides, via the input/output 
means 14, a separate franking card 18 in which both the 
identification code and the related franking numbers are 
stored. In one embodiment, said identification code and 

25 said franking numbers are stored with a message 

authentication code MAC1, which is calculated by the SAM 3 
of the terminal 2 together with the processor of the bank 
card 16. As known, a MAC is a checksum of supplied text by 
means of which it can be checked whether the supplied text 

30 is valid. Each modification in the text (in this case the 
identification code and the franking numbers) can be 
detected. A MAC can only be cross-checked with a secret 
key, which is known only to said SAM 3 and the appropriate 
postal authorities. The generation of MAC1 and the storage 

35 of the required data on the franking card 18 takes place in 
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steps 214 and 216, If several franking numbers are made 
available for use, the calculation of as many MAC1 S may 
cost too much time. Therefore, as desired, the calculation 
of MAC1 may be limited to a calculation over the 
identification code and/or other known data such as date of 
issue, value etc. 

As an alternative for the calculation of a MAC, the 
data can also be stored in encoded form. 

For further protection jSf the whole, the processor 4 
preferably sends a copy oy the identification code with the 
issued franking numbers ^/protected by MAC1 and/or protected 
by encoding, to the ex/hange 34, which stores this 
q information in memory 40 so that at a later stage possible 

fraude can be checked centrally, step 218. This will be 
i : f| 15 further discussed/later. 

x f\ If desired, a terminal code, which uniquely identifies 

S3 the terminal 2 which issued the franking card 18, can be 

; y stored in the memory of the franking card 18. If desired, 

□ said terminal code can form part of the calculation which 

:^ 20 the MAC1 has supplied. The terminal code, namely, can then 
'"■j not be changed unnoticed either. 

: s f Fig. 3a shows a flowchart of the functioning of 

franking machine 20 in accordance with the method as 
explained with reference to Fig. 2a. 
25 A user inserts his franking card 18 in the 

input/output means 21 of the franking machine 20 intended 
for this purpose. By doing so, contact is established 
between the franking card 18 and the processor 23 of the 
franking machine 20. Via suitable input means (for example 
30 a keyboard, not shown) , the user issues a command to said 

processor 23 to print an electronic postage stamp on postal 
article 22. As soon as said processor 23 has established 
that such an instruction has been received, step 302, said 
processor 23 reads either MAC1 with the related 
35 identification code and franking number, or the 
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identification code and the franking number in encoded form 
of said franking card 18. If present, the terminal code, 
which is stored in said franking card 18, will also be 
read. 

5 On the basis of the read-in data, the franking machine 

20 compiles, in a predetermined manner, a franking mark and 
prints this on the postal article 22, step 306. To this 
end, said franking machine 20, in a manner known per se, is 
provided with an opening in which the postal article 22 can 

10 be inserted, so that the franking mark can be printed on 
the postal article 22 with the aid of the printer 27. 

The situation can be such, for example, that said 
processor 23 is able to check whether the franking value is 
sufficient in view of the weight of said postal article 22. 

15 To this end, said postal article 22 is weighed by the 

weighing means 25, which send a weighing signal to said 
processor 23. The franking number can, for example, belong 
to a certain sub-group of all unique franking numbers which 
are only allowed to be used for postal articles up to and 

20 including 50 grams. A separate sub-group of unique franking 
numbers is then available per weight class and per type of 
postal delivery. Said processor 23 can thus check directly 
whether the franking value is correct, and, if this is not 
the case, warn the user via a display (not shown) . 

25 The franking mark, for example, is printed in the form 

of a two-dimensional bar code 28 on the postal article 22. 
Preferably the franking mark comprises at least the 
following data: the related franking number, the 
identification code of the user, the terminal code of the 

30 terminal 2, and a franking machine code which identifies 
the franking machine 20. Preferably said data, provided 
with a further MAC (MAC2), are printed in the franking 
mark. Such a MAC 2 is calculated by SAM 19 in the franking 
machine 20 together with the franking card 18, which 

35 thereto must be provided with a processor (not shown) . 
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Alternatively, the data can also be printed in encoded 
form, in which case the encoding takes place with the aid 
of known cryptographic techniques (possibly including the 
placing of a digital signature) . If desired, SAM 19 may 
5 keep track of a counter which, from a certain moment in 

time t 0 , reflects the total amount spent on franking in the 
franking machine 20 up to the moment concerned. The content 
of this counter then also is part of the franking mark. 
Optionally, the franking mark 28 can also comprise: 
10 address information of addressee and sender (possibly 

return address), service information such as "registered", 
"express delivery", etc., and date and time. This 
information can then be provided with a MAC and/or be 
encoded with the above-mentioned data with the aid of known 
15 cryptographic techniques. 

After the franking machine 20 has printed the franking 
mark on the postal article 22, said franking machine 20 can 
render each following use of the used franking number on 
the franking card 18 impossible. This takes place in step 
20 308. This may be done, for example, by deleting the related 
franking number on said franking card 18. 

Upon dispatch of the postal article 22 from a sender 
to a receiver, said postal article Z2 will, at a given 
time, arrive in a sorting centre ./There said postal article 
25 22 will be read in with the aid/of the means 32, and it 
can be checked again whether sraid postal article 22 has 
been sufficiently franked. Tme means 32 read at least the 
franking mark 28. The mean's 32 thus collect all read-in 
franking marks 28 of all/postal articles which are provided 
30 therewith. All franking marks 28 are subsequently sent to 
the exchange 34 and/are there read in by the processor 36 
via the input meanfe 44. Said processor 36 stores the 
inputted frankigig marks in the memory 42. 

At an earlier stage, said processor 36 had already 
35 received data from the terminals 2 related either to 
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franking numbers issued with related identification codes 
and MACl's, or to encoded franking numbers with related 
identification codes. Said data were stored in the memory 
40 by the processor 36. Thus said processor 36 is able to 
5 compare the data received via the input means 44, after 
storage in the memory 42, with the data stored in said 
memory 40. Thus it can be checked whether the franking 
numbers present in said memory 42 were indeed issued. If 
the franking number, the identification code, the terminal 

10 code and/or the franking machine code have been tampered 

with in any way, said processor 36 can derive this directly 
from the MAC1 and MAC 2 or encoded data included in the 
franking mark. Said processor 36 can then further derive 
for which terminal 2 and/or which user irregularities have 

15 occurred. The identification code, after all, uniquely 
identifies the user and/or the SAM 3 in the terminal 2. 

A further check takes place by processor 36 
maintaining which unique franking numbers were sent to the 
terminals 2, for example by storing said franking numbers 

20 in the memory 40. Of course said franking numbers can also 
be stored in another memory. In the first place, said 
franking numbers which were already sent to the terminals 2 
can then not be sent again. In the second place, the data 
sent to the exchange 34 by the terminals 2 can then, in a 

25 first round, already be compared to the issued franking 
numbers, so that it can be checked directly whether the 
franking numbers issued by the terminals 2 were indeed 
franking numbers which were sent from the memory 38. 

If the franking mark 28 possesses an identification 

30 code which uniquely identifies the owner of the bank card 
16, it is possible to implement the invention with later 
payment. After all, from the received franking marks 28 the 
processor 3 6 can then unequivocally derive which customers 
have used which franking numbers. This opens the 

35 possibility that the means 32, for example, measure the 
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weight of the postal article 22 and inform said processor 
36 of the weight together with the franking mark 28. In 
that case, said processor 36 establishes at that time how 
much the customer must pay for sending the related postal 
5 article, one and the other being dependent upon, for 

example, the weight of the postal article 22 and the type 
of dispatch. The balance of the customer at the bank is 
then debited for the related amount in a manner known per 
se. Instead of this, of course, an invoice can be sent or 

10 the balance can be debited at another bank, with which, in 
a manner known per se, a communication link is established. 
The advantage of this alternative methode is that the 
issuance of franking numbers is not yet coupled to the 
value which is required in view of the weight and the type 

15 of dispatch of said postal article 22. The unique franking 
number is then only an identification of the postal article 
22. The franking number does then not need to comprise 
information related to the franking value. 

In theory, therefore, two types of cards are possible: 

20 loadable cards (for example chip cards) and non-loadable 

cards (for example magnetic strip cards). In theory, three 
different ways of payment are further possible in both 
cases: prepayment of each electronic postage stamp 
entirely, post-payment of each electronic postage stamp, 

25 and a combination of pre-paid and post-paid electronic 
postage stamps. 

Figs. 2b and 3b show flowcharts for an alternative 
embodiment of the method according to the invention. Said 
alternative method is related to an embodiment in which a 

30 unique franking number is not applied per postal article. 
In some cases, a customer could wish to frank 1000 or more 
postal articles, for example. With the means available at 
this time for storing data on credit cards and/or cards 
provided with magnetic strips, it is impossible to store 

35 such large amounts of unique franking numbers, consisting, 
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for example, of 128 bits. This probleem can be circumvented 
by providing a franking number with a certain counter 
value . 

The method for providing an electronic stamp with 
5 counter is explained on the basis of Fig. 2b. Step 252 cor- 
responds to step 202 in Fig. 2a. 

Step 254 shows in an abbreviated way that a user must 
identify himself, for example in the manner as explained on 
the basis of steps 204-210 in Fig. 2a. 
10 Step 256 corresponds with step 212 in Fig. 2a. 

After the processor 4 has read the franking number, 
said processor 4, in step 258, reads a counter value. Said 
processor 4 can do this, for example, by asking the user 
via the monitor 8 to supply such a counter value. The 
15 magnitude of the counter value then determines the number 
of times that the related franking number may be used. 
Alternatively, the counter can represent a monetary value 
which can be expended on electronic postage stamps. The 
user can enter the counter value via the keys of the 
20 keyboard 10. 

In step 260, said processor 4 generates MAC1 on the 
basis of the identification code of the user, the franking 
number issued and the counter value. Alternatively, said 
data can be stored in encoded form. The counter value, 
25 therefore, is then securely stored and can not be changed 
unnoticed. 

In step 262, said processor 4 stores either MAC1 with 
the identification code, the franking number issued and the 
counter value, or the encoded data, on the franking card 
30 18. 

Again, said franking card 18 can have any embodiment 
such as explained above with reference to Fig. 2a. 

In- step 264, the processor 4 sends a copy of MAC1 with 
identification code, franking number and counter value, or 
35 the encoded form of said data, to the exchange 34. The 
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exchange 34 again stores the data in the memory 40 and thus 
knows how often the related franking number may be used- 
Fig. 3b shows a flowchart of the functioning of 
franking machine 20 for the embodiment in which use is made 
5 of a counter. 

In step 352, the franking machine 20 waits until the 
customer has submitted a request for printing an electronic 
postage stamp. Said step corresponds to step 302 in Fig. 
3a. 

10 As soon as the customer has submitted this request, 

the franking machine reads either MAC1 with identification 
code, franking number and counter value, or said data in 
encoded form, from the franking card 18. This takes place 
in step 354. 

15 In step 356, the processor 23 checks whether the read- 

in counter value is still greater than zero. If this is not 
the case, the related franking number is not allowed to be 
used further and an error message follows in step 358. 
After step 358, the program returns to step 352. 

20 If the counter value is greater than zero, the program 

of the processor 23 proceeds with step 360. In step 360, 
said processor 23 controls the printer 27 in such a manner 
that the franking mark calculated by said processor 23 is 
printed on the postal article 22. Said franking mark is 

25 again preferably provided with MAC2 . Alternatively, all 
data are printed in encoded form in the franking mark. 

Thereafter, in step 362, the processor 23 decrements 
the counter value on the franking card 18 in order to 
indicate that the related unique franking number may be 

30 used once less, or to decrement the available value. 

Of course the calculation of MAC 2 also takes the 
modified counter value into account. 

The actual counter value then forms part of the 
franking mark 28 on the postal article 22. 




PCT/EP99/09I70 



WO 00/31693 \ PCT/EP99/09170 

22 

It is remarked that the combination of unique franking 
number and actual counter value then still entails a unique 
bit string. This latter bit string, however, then has more 
bits than the number of bits of the unique franking number. 
5 The actual counter value is then jointly read by the 

means 32, and subsequently also stored in the exchange 34, 
via the input means 44 with the aid of the processor 36, in 
the memory 42. Said processor 36 then has the possibility 
of checking whether each combination of franking number and 
10 counter value is indeed used only once. Since the related 
information is protected by MAC 2 or is securely stored by 
encoding, illicit modification of these numbers can be 
detected by processor 36. 

Said processor 36 can also check whether the customer 
\n 15 has used the franking number for the permitted number of 

j'^ times, 

L l! 

I'i It will be clear that the embodiment according to 

Figs. 2b and 3b, just as the embodiment according to Figs. 
C3 2a and 3a, can be used with pre- and post-payment. 

20 Optionally it is possible, in the embodiment according 

to Fig. 1, where use is made of the franking card 18, to 
restrict the use of the franking card 18 to a number of 
pre-selected franking machines 20. To this end, the 
franking cards 18 can be provided with those franking 
machine codes, related to said franking machines 20, on 
which the use of said franking card 18 is permitted. 

A further option ±ss to implement the system shown in 
Fig. 1 in such a manner that each of the franking cards 18 
is also allocated a/unique number. Possible fraude with 
30 franking cards 18>can then be pin-pointed. Information 
related to said ^/fraudulently used franking cards 18 can 
then be included on an arbitrary franking card 18. 
Subsequently^ said information, related to the fraudulently 
used franking cards 18, can then be transferred 
35 "unpercedved" to the franking machines 20, which store the 



l! 4 




WO 00/31693 



23 



PCT/EP99/09I70 



related information in a memory (nc>t shown) . If a customer 
with fraudulently used franking oard 18 wishes to print an 
electronic postage stamp, the f/anking machine 20 can 
detect the related franking card 18 and render it invalid. 
5 This can be done either by depleting the contents of the 

franking card 18 or making Vnem non-readable, or by simply 
refusing to print an electronic postage stamp. Thereby 
further damages by possib/e fraude can be decreased . 

As an alternative for the use of a counter, a franking 

10 number, which for example can be used by the customer for a 
predetermined number of days, can also be used. This is 
only possible in the embodiment with which post-payment 
takes place. In that case, the franking number is still 
unique, but the franking number is used for more than one 

15 postal article 22. Since in that case a franking card 18 
with a certain unique franking number can be used for a 
non-predefined number of times, it is preferable in such an 
embodiment to apply a PIN code which the user of the 
franking card 18 requires in order to use said franking 

20 card 18 on the franking machine 20. In that case, said 

franking machine 20 must be arranged such that it can check 
the PIN code associated with said franking card 18. 

Fig. 5 shows an alternative embodiment of the 
invention in which use is made of a PC of a user instead of 

25 a terminal 2 such as shown in Fig. 1. 

Parts which are identical in Figs. 1 and 5 have the 
same reference numbers. 

In Fig. 5, reference number 52 designates the 
microprocessor of the PC 50 of a user. The microprocessor 

30 52 is connected to a monitor 54, a printer 62, a keyboard 
58 and, if desired, a mouse 60. In one embodiment, the 
microprocessor is also connected to input /output means 14, 
which can accept a bank card 18 (multi-functional 
chipcard) . For calculating MAC's or for determining the 
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codes of the data to be printed, the microprocessor 52 can 
be coupled to a SAM 64 . 

The microprocessor 52 is connected, for example via 
the PSTN, to a server system 70 to which several 
5 computer systems can be connected. Several server systems 
can be provided, each with their own connections to PCs. 
Said server system 70 is connected to the exchange 34. Said 
server system 70 comprises a server processor 72, to which 
a SAM or HSM (= Host Security Module = a computer system 
10 with the same functionality as a SAM, but with much larger 
capacity) 74 is connected. 

The communication between said PC 50 and the server 
system 70 can, for example, take place with an Internet 
protocol (IP) . 

Fig. 4a shows een flowchart of an embodiment of the 
functioning of the PC 50 ZLn the context of the present 
invention for reloading A bank card 18 with a certain 
desired amount to be spent on electronic stamps. Fig. 4b 
relates to the actuay printing of such an electronic stamp 
20 with such a bank ca/d 18. 

In step 402, the microprocessor 52 waits until a user 
submits a reguest for providing an amount for one or more 
electronic postage stamps. For executing such a request, 
the user makes use of the known input means, such as 
25 keyboard 58 and/or mouse 60. In this regard, the user first 
inserts his bank card 18 in the input/output unit 14. 

The microprocessor 52, via the monitor 54, thereafter 
asks the user to identify himself in a unique manner, step 
404. This can be done, for example, by the user inserting 
30 his bank card 18 in the input/output means 14, so that the 
microprocessor 52 can read the number of said bank card 18. 
Subsequently the user shall have to identify himself, for 
example with the aid of a PIN code, in order to make clear 
that he is the legitimate user of said bank card 18. The 
35 checking of the PIN code preferably takes place, as known 
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in the prior art, on the bank card 18 itself. Said micro- 
processor 52 can subsequently assume that the user has been 
identified in a unique manner with the aid of the bank card 
number, for example. This takes place in step 404. 
5 Alternatively, the microprocessor 52 can ask the user to 
enter the combination of bank card number and PIN, or 
another unique combination, via keyboard 58, after which 
this data is checked locally by the PC 50. In that case, 
said PC 50 must have this combination of data securely 
10 stored. 

In step 4 06, the microprocessor requests a unique 
franking number at the exchange 34. This occurs in a same 
way as explained above with reference to the Figs. 2a and 
2b. 

15 Subsequently the SAM 74 of the server system 70, 

together with the bank card 18, generates a MAC, MAC1 on 
the basis of the identification code of the user, the 
related franking number and the balance that was made 
available for electronic stamps. Alternatively, said server 

20 system 70 calculates enciphered data for the identification 
code, the franking number and said balance. This takes 
place in step 408. 

In step 410, the microprocessor stores, at choice, 
MAC1, the identification code, the franking number and said 

25 balance on the bank card 18. If an encoding step has taken 
place instead of a MAC calculation, the enciphered data of 
the identification code, the franking number and the said 
balance are stored on the bank card. 

In step 412, the server system 70 sends a copy of 

30 either MAC1, the identification code, the franking number 
and the balance, or the enciphered data of the 
identification code, the franking number and the balance, 
to the" exchange 34. Said exchange 34 will again store said 
data in its memory 40. 
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After step 412, the storage of a balance on the bank 
card 18 that can be used for electronic stamps is 
completed. 

Fig. 4b shows how a user, with his bank card 18 which 
5 has thus been provided with a balance, can instruct the PC 
50 to print a franking mark on a postal article. 

After the related program is started, step 450, said 
PC 50 waits until the user has submitted a request for 
printing a franking mark, step 452. 

10 Via step 454, said PC 50 experiences how high the 

postage costs must be that are to be processed in the 
franking mark. The user can enter the postage costs, for 
example, via the keyboard 58. It is imaginable that this 
step is automated with the aid of an automatic weighing 

15 device (not shown) , connected to said PC 50, which weighs 
the postal article, after which the postage costs are 
automatically determined and passed on to said PC 50. 

The user has brought his bank card 18 into contact 
again with the input /output means 14 and has identified 

20 himself again with the aid of his PIN code. The 

microprocessor 52 reads MAC1, the identification code, the 
franking number and the actual balance of the bank card 18, 
step 456. 

The microprocessor 52 subsequently checks, step 458, 
25 whether the actual balance is sufficient for the desired 
postage costs. If not, a message to the user then follows 
in step 460, entailing, for example, that the user must 
restore his balance on the bank card. 

In step 462, the microprocessor 52 instructs the 
30 printer 62 to print a franking mark, calculated by the SAM 
64, on the. postal article 22 after the user has inserted 
the postal article 22 in the printer 62. In that regard, 
SAM 64', together with the bank card 18, calculates MAC 2 
on the basis of all data which are included in the franking 
35 mark, among which: the identification code, the unique 
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franking number, the actual balance and the postage costs. 
As an alternative for calculating a second MAC, MAC2, said 
data can be encoded. The data preferably also contains a 
PC-code which uniquely identifies said PC 50. 
5 After step 462, the actual balance is decremented in 

step 464 by subtracting the postage costs therefrom. The 
new actual balance then represents the amount that is still 
available for further electronic stamps. 

It is remarked that in the embodiment which is 
10 described on the basis of Figs. 4a, 4b and 5, a unique 

franking number is used just until the original balance is 
expended. However, since the actual balance and the actual 
postage costs are also included in each franking mark, 
there is still a unique bit string per postal article. 
15 After step 4 64, the program returns to step 450. 

The payment by the customer preferably takes place at 
the moment the customer restores the balance on his bank 
card. This can takes place electronically in a manner known 
per se. In that regard, the debiting can again take place, 
20 via the exchange 34, from a central bank balance, or 
directly from the bank card 18 if this comprises an 
electronic purse. 

It is also imaginable, however, to let payment be made 
later, as explained above with yeference to the embodiment 
25 of Fig. 1. In that regard, the A>alance loaded in the bank 
card 18 does not represent a ytotal amount which can be 
expended on electronic stamcfs, but the number of times that 
the franking number provided can be used. The advantage of 
post-payment is that the/user does not need to weigh his 
30 postal article 22 in advance in order to have the correct 

franking value included in the franking mark 28. After all, 
the franking mark hence too uniquely identifies the user, 
who can subsequently have the invoice sent to him or whose 
bank balance can Joe automatically debited. Moreover, the 
35 presence of the Ainique franking number with identification 
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code and the actual "balance" guarantees thafcr each postal 
article 22 is uniquely identified, so that yfcraude can be 
detected immediately- / 

It is further remarked that, instead /of or together 
5 with an identification of the user, it j s possible to 
include an identification of the SAM 6/ in the franking 
mark. In that case, the owner of the yPC 50 with SAM 64 is 
responsible for the correct payment yof the electronic 
postage stamps and for possible fra^ude carried out with the 

10 PC 50. It is then up to said owner to subject access to the 
program for purchasing an electronic postage stamp to 
authorisation rules. / 

In a further embodiment wi/th the aid of a PC 50, a 
standard PC without SAM 64 can be used. In this case, said 

15 PC 50 cannot safely calculate MAC'S. The franking mark is 
then produced either centrally in the exchange 34 or in 
server system 70, and sepit to said PC 50. Said PC 50 then 
combines the received pranking mark with possible other 
information and print^ this on the postal article 22 with 

20 the aid of printer G2. In that case, instead of working 

with the storage oft a balance for electronic stamps on bank 
card 18, one f ran/king mark per time is retrieved from the 
exchange 34. In/this case, payments of electronic postage 
stamps preferably take place directly either by debiting a 

25 user's bank balance, or from bank card 18 with an 

electronicypurse . To contend with possible fraude, the user 
must uniqnoely identify himself, for example with his 
giro/banfc number and an associated PIN. Preferably, 
identification then still takes place with bank card 18 and 

30 by chfecking a PIN code. 

Furthermore, it will be clear to the expert that, 
although all processors and SAMs described up to here have 
been shown as single blocks, they may be implemented in 
practice in any other known way, i.e., as , for example, 

35 several cooperating subprocessors which, at choice, are 



WO 00/31693 PCT/EP99/09170 

29 

placed at some distance from each other and provide the 
desired functionality. They are preferably controlled by 
software but, where necessary, they may comprise analogue 
and digital circuits. 



